Maintainer of this skill?
Automated security scan — not a certification.
by Sev7eNup
Agentless Windows workflow orchestration. Self-hosted, open source, alternative to System Center Orchestrator with SCOrch workflow import.
# Add to your Claude Code skills
git clone https://github.com/Sev7eNup/NodePilotGuides for using ai agents skills like NodePilot.
Last scanned: 11/14/2026
{
"issues": [
{
"file": "CLAUDE.md",
"line": 374,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
},
{
"file": "CLAUDE.md",
"line": 384,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-11-14T11:16:04.886Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how NodePilot compares with popular alternatives.
NodePilot is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Sev7eNup. Agentless Windows workflow orchestration. Self-hosted, open source, alternative to System Center Orchestrator with SCOrch workflow import. It has 175 GitHub stars.
Yes. NodePilot passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/Sev7eNup/NodePilot" and add it to your Claude Code skills directory (see the Installation section above).
NodePilot is primarily written in C#. It is open-source under Sev7eNup on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh NodePilot against similar tools.
No comments yet. Be the first to share your thoughts!
From $49 · 30 days · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Open-source Windows and PowerShell workflow automation. Self-hosted, agentless execution over WinRM, with an import path for System Center Orchestrator runbooks.
Multi-step automation is designed, scheduled, debugged and observed in the browser. PowerShell, file, registry and service operations, REST calls, SQL and further activities are executed across a Windows estate over WinRM, without agents on the targets.
🌐 Website · ▶️ Live demo · 📚 Documentation · ⬇️ Download · 🚀 Install
Open the live demo to try the actual web UI with sample data. It runs entirely in the browser, requires no installation and sends no data anywhere. Each visitor has a private copy, which resets on reload. Workflows can be built, published and run, while the canvas updates live.
It is the product's own frontend on an in-memory backend, so anything that genuinely needs a server (PowerShell on a host, a WinRM test, mail, a restore) reports that limitation instead of pretending.
NodePilot is agentless workflow orchestration for Windows, built in the browser and running PowerShell on remote machines over WinRM. It is meant for sysadmins automating Windows estates, for organizations looking for a modern alternative to SCOrch, as well as for private users who rely heavily on PowerShell.
Highlights
np): every operation from the command line, for scripts and pipelines.nodepilot-mcp lets Claude Code and other MCP clients drive NodePilot — 116 tools over 12 groups, destructive operations gated..ois_export runbooks become NodePilot workflows. How it works.NodePilot runs in three supported shapes. Each one leads to a working login on its own.
| 1 · Desktop app | 2 · Windows service | 3 · From source | |
|---|---|---|---|
| For | one person, one machine | a team, a real server | contributors, evaluation |
| You need | Windows 11 x64, local admin | Windows Server 2022/2025, a TLS certificate, a prepared database | .NET 10 SDK, Node, a local PostgreSQL |
| You get | installer .exe with bundled PostgreSQL and .NET runtime, opens a native window |
setup .exe (or the signed .zip + PowerShell installer), Windows service under a gMSA, Kestrel HTTPS |
dotnet run + Vite dev server on your own machine |
| Database | bundled, loopback-only | you provide it | you provide it |
| Offline | yes, fully | yes | no (package restore) |
| Guide | below · details | below · step-by-step | below |
NodePilot is Windows-only by design, because the engine drives PowerShell remoting over WinRM and protects credentials with DPAPI.
On every path the first login creates the Admin account with a one-time setup token. Where the token comes from is noted per path.
A local application for Windows 11 x64. One .exe bundles the app, the .NET 10 runtime and a local PostgreSQL, installs them as background services and opens a native window. It works fully offline.
NodePilot-Desktop-Setup-<version>.exe is downloaded from the latest release and run with local admin rights. The installer hands the setup token straight to the login screen. Since the backend runs as a service, scheduled and webhook triggers keep firing while the window is closed. Help with problems is in docs/desktop-troubleshooting.md, and all log files are listed under Logs & diagnostics.
The build requires the .NET 10 SDK, Node, Inno Setup 6 and the pgsql folder of the PostgreSQL 16 binaries.
deploy\desktop\Build-DesktopInstaller.ps1 -PgBinariesPath 'C:\Packages\pgsql' -Version 1.2.0
# -> deploy\desktop\out\NodePilot-Desktop-Setup-1.2.0.exe
This script does not sign. A signed installer comes from the release build (deploy\Build-Artifact.ps1 -IncludeDesktopInstaller), see deploy/desktop/README.md.
NodePilot runs as a Windows service under a gMSA, with HTTPS directly in Kestrel and in-place upgrades that can roll back.
Prerequisites, all checked by the installer's pre-flight:
-UseLocalSystem works without a domain)